CVE-2007-3843

Linux Kernel < 2.6.23-rc1 - CIFS Network Traffic Spoofing via Incorrect sec Mount Option Handling

Title source: llm

Description

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request.

References (18)

Core 18

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9670

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27747

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/28806

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2007/dsa-1363

Various Sources x_refsource_confirm

http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.23-rc1

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2007-0939.html

Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/usn-510-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/25244

Vendor Advisory x_refsource_confirm

http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26647

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27912

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26760

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2007-0705.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26366

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00001.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00002.html

Issue Tracking x_refsource_confirm

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=246595

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27436

Scores

EPSS 0.0262

EPSS Percentile 84.0%

Details

Status published

Products (1)

linux/linux_kernel < 2.6.22

Published Aug 09, 2007

Tracked Since Feb 18, 2026